CVE-2000-0886

HighCVSS 7.5/10Last modified Sep 23, 2026

Description

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Dec 19, 2000
Last modified: Sep 23, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-08875.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request CVE-2000-08885.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv CVE-2000-08895.1Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear CVE-2000-08901.2periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink a CVE-2000-08917.5A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email CVE-2000-08922.6Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or CVE-2000-08935.0The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target hos CVE-2000-089410.0HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooti CVE-2000-089510.0Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arb CVE-2000-08965.0WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewal CVE-2000-08975.0Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a dir CVE-2000-08985.0Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and pos